1Win Kenya: Official Privacy Policy

Welcome to 1Win Kenya. This Privacy Policy outlines how 1Win Kenya collects, uses, stores, and protects your Personal Data in compliance with the Data Protection Act  of Kenya, the Betting, Lotteries and Gaming Act, and international Anti-Money Laundering standards. By registering an account and using our betting services, you acknowledge and agree to the terms described in this Policy.

Data Collection: What We Collect

We collect data necessary to provide our services, maintain security, and fulfill legal and regulatory duties. The types of Personal Data we collect include:

Identity and Contact Data (Mandatory for KYC)

This data is collected during registration and the Know Your Customer verification process:

• Identification: Full Legal Name, Date of Birth, Gender, Kenyan National ID or Passport Number.
• Contact Details: Mobile Phone Number (must match registered M-Pesa/Airtel Money), Email Address, and Residential Address (via utility bill or bank statement).

Transaction and Financial Data

• Transaction History: Records of all deposits, withdrawals, bet stakes, winnings, and tax deductions (20% WHT).
• Payment Source Data: The mobile number or bank account details used for funding the account.

Technical and Usage Data

• Device Information: IP address, device type, browser type, operating system, and unique device identifiers (for mobile app users).
• Betting Activity: Login times, pages viewed, time spent on the Platform, and details of promotional usage.

Purposes of Data Processing (Why We Use Your Data)

We process your Personal Data based on specific legal grounds:

Purpose of Processing	Legal Basis/Requirement	Type of Data Used
Account Creation & Service Delivery	Performance of Contract (T&Cs).	Identity, Contact, Transaction.
Legal & Regulatory Compliance (KYC/AML)	Legal Obligation (Kenyan DPA, POCAMLA).	Identity, Contact, Financial.
Fraud & Cheating Prevention	Legitimate Interest (Protecting our business and fair play).	Technical, Usage, Identity.
Marketing & Promotional Offers	User Consent (Unless Legitimate Interest applies).	Contact, Usage.
Dispute Resolution & Evidence	Legal Obligation / Legitimate Interest.	Transaction, History, Correspondence.

Compliance and Anti-Money Laundering 

We are legally required to verify your identity and monitor transactions to prevent fraud and money laundering (Proceeds of Crime and Anti-Money Laundering Act - POCAMLA). This requires us to retain your data for a mandated period, even after you close your account.

Responsible Gambling

We process usage data to identify and support users who may be at risk of problem gambling, allowing us to enforce self-exclusion periods and deposit limits.

Data Sharing and Disclosure

We will never sell your Personal Data. We only share it with third parties under strict conditions:

1. Regulatory Authorities: We share data with the Betting Control and Licensing Board (BCLB), the Kenya Revenue Authority (KRA) for tax remittance (20% WHT), and the Financial Reporting Centre (FRC) for AML compliance.
2. Payment Processors: We share necessary transaction data with mobile money operators (M-Pesa, Airtel Money) and banks to facilitate deposits and withdrawals.
3. Fraud Prevention Services: We may share identification data with partners to cross-reference against fraud databases and sanctions lists.
4. Legal Requirements: If mandated by a valid court order or other binding legal process.

Data Storage and Security

We take the security of your data seriously.

Security Measures

We employ robust technical and organizational measures, including encryption (SSL/TLS), firewalls, access controls, and secure server environments, to protect your data from unauthorized access, loss, or destruction. Access to your personal information is strictly limited to employees who require it to perform their official duties.

Data Retention

In line with regulatory requirements, we are legally obliged to retain certain records for a fixed period.

• General Data: We retain basic KYC and transaction data for a minimum of seven (7) years after you close your account or cease using our services, as required by financial and AML laws.
• Marketing Consent: This is kept only until you withdraw your consent (opt-out).
• Dispute Records: Retained for the duration necessary to resolve the dispute, plus any applicable limitation period.

Your Legal Rights

Under the Kenyan Data Protection Act, you have the following rights regarding your Personal Data held by 1Win Kenya:

User Right	Description & Limitations
Right to be Informed	You have the right to know what data we collect and why (detailed in this Policy).
Right of Access	You can request a copy of the personal data we hold about you (subject to a 30-day response period).
Right to Rectification	You can ask us to correct inaccurate or incomplete data we hold about you.
Right to Object/Restrict	You can object to data processing for marketing or profiling. We may decline if processing is a legal duty.
Right to Erasure (The "Right to be Forgotten")	You can request account deletion. However, we must retain KYC and transaction data for the mandatory 7-year legal period (AML/Tax compliance).
Right to Complain	You have the right to lodge a formal complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

FAQ